http:
  routers:
    cockpit:
      rule: "Host(`{{ vault_domain }}`) && (PathPrefix(`/cockpit/`) || Path(`/cockpit`))"
      entryPoints: https
      middlewares:
        - force-trailing-slash
      service: cockpit
      tls:
        certresolver: wildcard

  middlewares:
    cockpit-stripprefix:
      stripPrefix:
        prefixes:
          - "/cockpit"

  services:
    cockpit:
      loadBalancer:
        servers:
          - url: "http://127.0.0.1:9090"